Hello, You could create a VRF or use an existing one (in case you need someday to integrate in routing), that's no big deal. Regarding the creation of 1 BD for several isolated Vlans made with EPGs, I would not do that way. Even if no contract, the EndPoints could still be visible to some traffic like ARP or L2 Uknown Unicast set to Flood (as recommended in L2 BD).   Remi ... View more

Hi Fabio,   I would really recommend not to do that. There are numerous drawbacks and limitations.   You will need to disable L3 Configuration and Unicast Routing in the Bridge Domains. Then you will manage/view all your Endpoints with MAC addresses only. The Fabric will not enhance Endpoint detection by ARPing destinations. Let's assume you have 2 Subnets/BDs A and B. You'll need to create an EPG for SVI A. But because of inter-SVI routing, that EPG will also represent all the Endpoints located in Subnet B, which are in reality in other EPGs attached to BD B... Setting a contract between EPG Subnet A and EPG Subnet B will just not work. You'll need EPG A to SVI A, then SVI B to EPG B. Routing outside the Fabric should really be avoided except using L3Outs. Your SVI devices will be the bottleneck of your network and will break the scale-out concept of distributed routing. Forget about VRF Route-Leaking, PBR, ... And so on... I'm not even talking about the financial impact of using an ACI Fabric with 80% of features unused.   Hope you'll convince your managers for the sake of your network team!   Remi Astruc ... View more

Hello,   That is possible! You just need to unveil the hidden menu by actually selecting the Symmetric Hashing Control:   Remi   ... View more

Hello, Previous statments are not right. N9K-X97160YC-EX supports 100M on GLC-TE since 7.0(3)I7(4). I use that already without issue.   https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/release/notes/70374_nxos_rn.html#_Toc532579213   Remi ... View more

Hi Craig,   Out of Band mgt requires some additional config if not already done.   Go in the tenant mgmt and ensure you have the following stuff in it: - An Out-of-Band Contract, with a Filter into it (common/default to be permissive). - A Node Management EPG, with Provided OoB Contract being the one you created before. - An External Mgt Instance Profile, with Consumed OoB Contract being also the one you created, and Subnet 0.0.0.0/0. - Ensure you defined your Leaf mgt IP into Node Mgt Addresses > Static Node Mgt Addresses, set with the Node Mgt EPG you created before.   If still does not work, check all the Faults in your System.   ... View more

Hello nhlong27,   That sounds like a L2 Policy Vlan scope issue. By default the switch will consider a Vlan ID to map with a given EPG on the whole Leaf (within a given Physical Domain), which is called Global Scope. In that case, the 2 EPGs representing Inside and Outisde probably conflict with faults raised. Check the Leaf Access port policy that you use for the FW ports and note the L2 Interface Policy field. Check the corresponding Interface Policy to see its VLAN Scope. If it is set to Global scope, try to set it as Port Local scope. That gives the Vlan ID a local port significance.   Remi ... View more

Hello Gregory Rose, What are the latest developments about ACI Power Tool? Thanks ... View more